Bump the github-actions group with 2 updates (#698)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Daniel Tedman <dbtedman@gmail.com>

Author: dependabot[bot]

.github/workflows/sast.yml

@@ -32,12 +32,12 @@ jobs:
                   results_file: "results.sarif"
                   results_format: "sarif"
                   publish_results: true
-            - uses: "actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4"
+            - uses: "actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f"
               with:
                   name: "SARIF file"
                   path: "results.sarif"
                   retention-days: 5
-            - uses: "github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412"
+            - uses: "github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7"
               with:
                   sarif_file: "results.sarif"
 
@@ -51,7 +51,7 @@ jobs:
 
         steps:
             - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8"
-            - uses: "github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412"
+            - uses: "github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7"
               with:
                   languages: "typescript"
             - uses: "pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061"
@@ -62,4 +62,4 @@ jobs:
                   node-version-file: ".nvmrc"
                   cache: "pnpm"
             - run: "make install"
-            - uses: "github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412"
+            - uses: "github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7"